From 636d1ebd70fd6825fbd4d30b41abf865213aa9ab Mon Sep 17 00:00:00 2001 From: Ade Lovett Date: Tue, 19 Sep 2000 02:59:29 +0000 Subject: Cyrus-SASL 1.5.24 sources changed on Aug 15th -- changed a hard coded value to a variable. Kerberos IV detection fails due to double check on krb_mk_priv (with/without com_err), used cached value from first check for krb_mk_priv. Added addtional pwcheck methods (MySQL & LDAP Authentication). PR: 21383 Submitted by: maintainer --- security/cyrus-sasl2/files/patch-aj | 46 +++++++++++++++++++++++++++++++++++++ 1 file changed, 46 insertions(+) create mode 100644 security/cyrus-sasl2/files/patch-aj (limited to 'security/cyrus-sasl2/files/patch-aj') diff --git a/security/cyrus-sasl2/files/patch-aj b/security/cyrus-sasl2/files/patch-aj new file mode 100644 index 000000000000..569384a100d4 --- /dev/null +++ b/security/cyrus-sasl2/files/patch-aj @@ -0,0 +1,46 @@ +--- doc/sysadmin.html.orig Wed Jul 12 21:59:51 2000 ++++ doc/sysadmin.html Fri Sep 15 20:56:28 2000 +@@ -171,6 +171,43 @@ +
pwcheck
checks passwords with the use of a seperate, + helper daemon. needs to be documented.

+ ++

mysql
A MySQL database can be used for plaintext ++ password checking by setting "pwcheck_method" to "mysql".

++ ++

The following SASL options are used for MySQL Authentication:

++ ++

++
mysql_user: <user>
++
mysql_passwd: <cleartext pw>
++
mysql_host: <host>
++
mysql_database: <database>
++
mysql_table: <table>
++
mysql_uidcol: <username col>
++
mysql_pwdcol: <password col>
++
++ ++

MySQL pwcheck_method created by David Matthew Zendzian ++ the original patch may be found at http://www.dmzs.com/~dmz/projects/cyrus/.

++ ++

ldap
A LDAP server can be used for plaintext password ++ checking by setting "pwcheck_method" to "ldap".

++ ++

The following SASL options are used for LDAP Authentication:

++ ++

++
ldap_server: <LDAP Server [localhost]> ++
ldap_basedn: <LDAP base dn> ++
ldap_uidattr: <LDAP uid attribute [uid]> ++
ldap_port: <LDAP port [389]> ++
++ ++

It is a requirement that "ldap_basedn" be set to the appropriate ++ value for your site
++ (ex. ldap_basedn: o=surf, c=UK)

++ ++

LDAP pwcheck_method created by Simon@surf.org.uk ++ the original patch may be found at http://www.surf.org.uk/.

++ +

write your own
Last, but not least, the most flexible + method of authentication for PLAIN is to write your own. If you do + so, any application that calls the "sasl_checkpass()" -- cgit v1.2.3